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Abstract: This paper proposes a reliability analysis framework for systems subject to multiple design require- 
ments that depend polynomially on the uncertainty. Uncertainty is prescribed by probability boxes, also known 
as p-boxes, whose distribution functions have free or fixed functional forms. An approach based on the Bern- 
stein expansion of polynomials and optimization is proposed. In particular, we search for the elements of a 
multi-dimensional p-box that minimize (i.e., the best-case) and maximize (i.e., the worst-case) the probability 
of inner and outer bounding sets of the failure domain. This technique yields intervals that bound the range of 
failure probabilities. The offset between this bounding interval and the actual failure probability range can be 
made arbitrarily tight with additional computational effort. 
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1. INTRODUCTION 


This paper studies the reliability of a system for which a parametric mathematical model is available. The 
acceptability of the system depends upon its ability to satisfy several design requirements. These requirements, 
which arc represented by a set of polynomial inequality constraints on selected output metrics, depend on the 
uncertain parameter p. The reliability analysis of the system consists of assessing its ability to satisfy all the 
requirements when the value of p is uncertain. In this article the uncertainty in p will be modelled as a p- 
box. This means that the cumulative distribution function (CDF) for p lies within the bounds set by the p-box, 
but that it is unknown which of the many CDFs satisfying such bounds actually describe the uncertainty in 
p. The propagation of a p-box through the inequalities prescribing the requirements yields a range of failure 
probabilities. The main goal of this paper is the generation of tight outer bounds to this range. 

A significant thrust of this research is the generation of inner bounding sets to the safe and failure domains using 
Bernstein expansions [1], These sets arc instrumental for generating intervals that bound the failure probability 
range resulting from propagating all the elements of a p-box from the inputs to the output. The technique 
proposed searches for the elements of the p-box that minimize and maximize the probability of inner and outer 
bounding sets of the failure domain. The corresponding probabilities arc the limits of the desired intervals. 
Formulations applicable to p-boxes comprised of fixed-form- and arbitrary- form-distributions are proposed. 

This paper is organized as follows. Basic concepts from reliability analysis, Bernstein polynomials, and im- 
precise probabilities arc introduced in Section 2. Formulations aiming at identifying the extreme distribution 
functions from a p-box for a given set of polynomial requirement functions arc presented and exemplified in 
Section 3. Finally, a few concluding remarks close the paper. 


2. BACKGROUND 

2.1. Basic Concepts and Notions 

A probabilistic uncertainty model of p G M ,s is prescribed by a random vector supported in the support set. 
This set, which is comprised of all possible uncertain parameter realizations that may occur, will be denoted as 
A C R s . This model is fully prescribed by the joint cumulative distribution function F p (p) : A — >• [0, 1]. 



Consider a system that depends on the uncertain parameter p. The requirements imposed upon such a system 
arc prescribed as the vector 1 inequality g(p ) < 0. The requirement function g is defined as </ : P M’\ and 
A CTC M ,s , where T> is the master domain. 

The failure domain , denoted as F C R'\ is comprised of the parameter realizations that fail to satisfy at least 
one of the requirements. Specifically, the failure domain is given by 

V 

F= \J{P : 9i(p) >°}, (1) 

2—1 

The safe domain , given by S = C(F), where C(-) denotes the complement set operator C(Z) —V\Z. consists 
of the parameter realizations satisfying all requirements. The failure probability associated with the distribution 
function F p is given by 

Pf p [F] = j 1 dF p , (2) 

where Pp ■ [•] is the probability operator determined by the distribution F p . 

Techniques for bounding T and S will be presented below. The resulting bounding sets arc unions of hyper- 
rectangles. The hyper-rectangle having m > 0 as the vector of half-lengths of the sides and p as its geometric 
center, is given by 

7 Z(p, m) = {p:p — m<p<p + m} = 5 (p — m,p + m), (3) 

where S(x, y) = S\ x 62 x ■ ■ ■ x S s , h the Cartesian product of the intervals A; = ( aq , y^. 

A subdivision is the result of dividing a set in p-space into pairwise disjoint subsets. Let pi-) be an operator 
whose input is any given set and its output arc the subsets. A bisection-based subdivision of the hyper-rectangle 
given in (3) in the ith direction is given by 

p(72) = {72(p + w,m — w),1 Z(p — w,m — w)}, (4) 

where w = [0, ....(), rn l /2. 0. .... 0], That is, the hyper-rectangle is cut along its ith component into two 
sub-hyper-rectangles of equal size. 


2.2. Bernstein Polynomials 

The image of a hyper-rectangle when mapped by a multivariable polynomial is a bounded interval. By ex- 
panding that polynomial using a Bernstein basis over that rectangle, rigorous bounds to such an interval can 
be calculated using simple algebraic manipulations. Bernstein polynomials will be used for determining if a 
hyper-rectangle 72 Cl s is fully contained in the failure or safe domains associated with the vector inequality 
g(p ) < 0. Mathematical details of this technique can be found in [2]. 

The outcome of the set containment determination depends exclusively on the refinement of the partition of 72 
the analyst is willing to perform. Additional computational effort in the refinement of such a partition can be 
used to render the tests conclusive. 


2.3. Imprecise Probabilities 

Imprecise probabilities is the subject of several theories involving models of uncertainty that do not assume a 
particular - underlying probability distribution. Instead, it assumes that the underlying distribution may be any 
member of a family of distributions. Theories of imprecise probabilities are often expressed in terms of lower 
and upper probabilities for every possible event from some universal set. Interval probabilities, Dempster- 
Shafer structures and p-boxes can be regarded as special-cases of imprecise probabilities [3, 4]. 

'Throughout this paper, it is assumed that vector inequalities hold component- wise, super-indices denote a particular vector or set, 
and sub-indices refer to vector components; e.g., p ( f 1 is the ith component of the vector . 




Figure 1: P-box envelopes (dashed lines), p-box members (solid lines with circles), and requirement function 
(thick solid line). 


In this paper uncertainty will be prescribed via p-boxes. A one -dimensional p-box is a class of imprecisely 
known distributions functions F p {p) bounded between a pair of enveloping distribution functions F_ p (p) and 
F p (p) supported in V such that F_ p (p) < F p (p) < F p (p) for all p values. This means that the distribution for 
the random variable p, F p , is unknown except that it satisfies these inequalities. 

P-boxes result from cases (i) where the distribution is known to take a particular form but its parameters can 
only be specified by intervals, (ii) where envelopes of all distributions matching a given set of moments are 
constructed from inequalities (e.g., Markov, Chebyshev), (iii) where empirical distributions functions are built 
using data subject to measurement uncertainty, (iv) where the functional form of the distribution cannot be 
determined due to limited amount of data (e.g., Kolmogorov-Smirnov, confidence bounds), and (v) where 
several classes of uncertainty models are present (e.g., uncertainties are prescribed as a collection of intervals, 
subsets of independent random variables and subsets of dependent random variables with unknown copulas 
[4]). 

In this paper, two types of p-boxes are considered. One type is an arbitrary distribution p-box. This type 
of p-box is defined by specifying two envelope distribution functions, F_ p and F p , satisfying the restriction 
that F p (p) < F p for all p. A CDF F p belongs to this p-box if it falls between these two envelopes; i.e., if 
F p {p) < F p (p) < F p for all p. Another type is a fixed form distribution p-box. This p-box only contains 
members of a parametrized family of distributions. For example, to specify a fixed form distribution p-box one 
might require that all CDFs in it be Gaussian distributions. The size of this p-box is limited by restricting the 
allowable range of values for the defining parameters. In the Gaussian case, this might consist of requiring the 
mean and standard deviation to fall in some specified intervals. Figure 1 shows the envelope distributions of an 
arbitrary distribution p-box as well as two of its elements. 

The set of p-boxes for a set of s uncertain parameters will be denoted as B p , where B p . for i = 1, ... s is an 
arbitrary distribution p-box or a fixed form distribution p-box as described above. Hereafter it is assumed that 
the uncertainty in each component of p is given by a CDF belonging to a prescribed p-box. Furthermore, any 
random variable associated with a possible distribution of p i is independent of those of for all i f j. 

While the probability of an event for a given distribution is a scalar, the probability of an event for a p-box is 
a range. This range can be an interval or a disconnected set. Each point on this range corresponds to at least 
one element of the p-box. The reliability analysis of a system subject to the requirements g(p ) < 0, where the 
uncertainty model of p is an unknown element of the p-box B p , consists of calculating or bounding the range 


of all possible failure probabilities 


X = 


min Pp L7 7 ] . max Pf„[F] 

Fp&Bp pL Fp&Bp pL 


(5) 


In most practical applications X cannot be calculated exactly. Instead, the inner and outer bounding intervals 
X and X, satisfying 

[l, u]=XCXCX= [I,u], (6) 

are calculated. The tightness of the bounds of X, measured by (u — u) + (l — Z), will depend on a convergence 
parameter set by the analyst. X. enables estimating the portion of X that can be reduced with additional 
computational effort. While the upper endpoint of X cannot be reduced more than u — u, the lower endpoint 
cannot be increased more than l — l. 


3. RELIABILITY ANALYSIS 


In this section we present an algorithm for generating outer bounds to the failure probability range by searching 
for the elements of the p-box B p that minimize (i.e., best-case ) and maximize (i.e., worst-case ) the probability 
of inner and outer bounding sets of the failure domain. The determination of extreme-case distributions, by 
which we mean best- and worst-case distributions, has been the focus of attention recently [5]. The best- and 
worst-case distributions, denoted as Fp £ B p and F™ £ B p respectively, are distributions whose propagation 
yields the lower and upper limits of X. Specifically, 


Fp = argmin P F [F ] , 

Fp&Bp 

(V) 

F p = argmax Pp p [F]. 

Fp&Bp 

(8) 


These distributions, which depend on the geometry of F, may not be unique. 

The distributions shown in Figure 1 are examples of a worst-case (orange line) and best-case (blue line) dis- 
tribution, respectively, for the given p-box and the requirement g{p) < 0. Note that the worst-case distribution 
rises the most over the failure domain, i.e., region over the abscissa colored in red, while the best-case dis- 
tribution rises the most over the safe domain, i.e., region over the abscissa colored in green. Note that any 
distribution passing through the points where F™ E B p (resp. Fp E B p ) crosses the failure domain’s boundary 
is also worst-case (resp. best-case). These points are shown as small circles over the distributions. 

A strategy for determining the extreme-case distributions corresponding to bounding sets of the failure domain 
is presented below. An iterative procedure for generating these bounding sets is presented next. 


3.1. Set Bounding 

This section presents an algorithm to generate and sequentially expand subsets of the failure and safe domains. 
These sets arc unions of disjoint hyper-rectangles chosen from a partition Q of V. Let J rsuh and <S sub denote 
subsets (i.e., inner approximations) of the failure and safe domains formed from selected elements of Q. Note 
that 0 C J rsub CJC C'(iS sub ) C V, where C'(-) is the complement set operator defined earlier, and that the 
failure domain boundary, denoted as OF, lies in the region between the interiors of J rsub and <S sub . 

The sequences of inner bounds {5f ub ,5| ub , . . .} and {J 7 f ub , J r | ub , . . .} are generated by the algorithm below. 
These sequences are made to converge to the domain being bounded. In particular, the algorithm below iter- 
atively generates indexed partitions Q l of V and indexed sets 5| ub , Jq ub and A* which arc unions of hyper- 
rectangles from Q\ where 5f ub is an inner approximation to the safe domain, F- ub is an inner approximation 
to the failure domain, and A t is a region comprised by the rectangles of Q' that are not in <S| ub or JA ub . Note 
that while Q l is a list of hyper-rectangles, 5| ub , J r ? ub and A, arc sets comprised by the union of some of these 



rectangles. The algorithm proceeds by successively selecting each of the component hyper-rectangles 7 2 of A t . 
The tests in Theorems 1 and 2 in [2] for t = 1 are applied to 72. If either of these tests determine that 71 C S 
or 72 C T . then 72 is removed from A $ and added to 5f ub or J 7 |’ ub , respectively. If neither of these conditions is 
satisfied, 72 is subdivided, and the resulting sub-rectangles replace 72 in the partition. The algorithm terminates 
when the volume of A* is sufficiently small. 

The algorithmic representation of this procedure is as follows. Let the inequality constraint g(p) < 0 defined 
over p G V prescribe the system requirements. Set i = 1, Q 1 = {77}, A j = 72, •7 r j' ub = 0, and 5™ b = 0. Pick a 
convergence criterion e > 0. 

1. Let L contain the elements of Q l comprising A,. 

2. Determine which elements of L arc contained in the safe domain and which ones arc contained in the 
failure domain. Denote by U the list of elements contained by the safe domain, by V the list of elements 
contained by the failure domain, and by W the list of elements that arc not in U nor V. Furthermore, let 
U. V and VV be the union of the elements in U, V and W respectively. 

3. Make Sf“ b = Sf° U U\ J|“ b = Tf° U V; and A i+1 = A t \ (U U V). 

4. If Vol(Aj + i) < e stop 2 . Otherwise, make Q l+1 = {Q l \ W) U p(W), increase i by one, and go to Step 1. 

As the number of iterations increases, 5} ub and Jq sub approach the safe and failure domain. Note that the closure 
of A i not only covers the boundary of T but also approaches that boundary as i increases. 


3.2. Extreme-Case Distributions over Bounding Sets 

In this section we present techniques which utilize the inner bounding sets of Section 3.1 to calculate the 
bounding intervals A and A of Equation (6). A left endpoint of X (resp. A) is found by seeking distributions 
from the p-box which minimize the probability of an inner (resp. outer) bound to the failure set. For the right 
endpoint, distributions in the p-box arc sought which maximize these probabilities. The tighter the bounding 
sets, the smaller the gap between X and X. 

The bounding intervals corresponding to the partition Q l arc denoted by A ; and Xi. Recall that Jq ub , 5f ub , and 
A i arc comprised by elements of Q 1 . While the upper limit of X. t can be used to declare a system acceptable, 
i.e., because it is smaller than the largest admissible failure probability, the upper limit of A , can be used to 
declare it unacceptable, i.e., because it is larger than the largest admissible failure probability. 

The formulations below enable calculating A,; and A ,- for the partition Q l that results from the ith iteration of 
the algorithm in Section 3.1. The corresponding collection of bounding intervals defines sequences. Note that 
the elements of the sequences X t and A,; satisfy A i C A i+l C A C Aj+i C A j. By design, the sequences 
for A j and X, approach A monotonically as i increases. 

The developments that follow enable calculating the bounding intervals corresponding to a given partition. 
Formulations applicable to fixed form distribution and arbitrary distribution p-boxes are presented next. 


3.2.1. Fixed Form Distribution P-Boxes 


Recall that a fixed form distribution p-box assumes a parametrized functional form. Fet 6 denote the corre- 
sponding vector of parameters. A fixed form p-box is fully prescribed by its functional form and the domain 
of 6. This domain will be denoted as 0. The parameters of the best-case and worst-case distribution for the 
partition p( V) = {J r ? ub ,5| ub , Aj} are given by 


( 


6 ° = argmin 
0e© I 


E 

n.jQFf’ 


P F p (0) [Kj] 


(9) 


2 In the context of Section 3.2, a better stopping criterion is Vol(Xi \ A';+i) < e. 



( 10 ) 


6 Y — argmin ^ 
oee 


i E 

It ijCSf* 


P F p {6 ) [Pj] 


Therefore, the best-case distribution minimizes the probability of the inner bounding set of the failure domain 
as if A i were fully contained in the safe domain; while the worst-case distribution maximizes the probability of 
the inner bounding set of the safe domain as if A* were fully contained in the failure domain. The solution to 
Equations (9) and (10) yields the outer bounding interval 


X, = 


P, 


) f T7SUbl ID r csub‘ 

F p (e\)Pi J4 p F p (PY)[\ \ 


The inner bounding interval corresponding to the same partition is given by 

/ 

[on, Pi ] , if oii < Pi 


X , = 


otherwise. 


where a,- = 


«< = P Fp(ep [^I ub ] • A = 1 - P Fpm [5f ub ] , and 


( 11 ) 


( 12 ) 


B l i = argmax \ V P Fp ( 0 ) [Pj 
0e0 \k ^ 


I 


Of = argmax <( V P F {e) [Kj] 
6&e 


(13) 


(14) 


Therefore, the lower limit of X i coiTesponds to the distribution that maximizes the probability of the inner 
bounding set of the safe domain as if A* were fully contained in the failure domain; while the upper limit 
coiTesponds to the distribution that maximizes the probability of the inner bounding set of the failure domain 
as if A i were fully contained in the safe domain. Note that 0 1 ’ and O f closely approximate 9\ and O f when 
Vol(Aj) < Vol(P). 


When the uncertain parameters arc independent, the above probabilities can be readily evaluated using 

S S 

Pf'p(o) [P] = n P Fp ;i (9) [fy] = ( F Pj (0)(bj ) - F Pj (0)(c 

3 = 1 3 = 1 

where Sj = ( a 3 , b f is the projection of 1Z onto the p • axis. 


j ) ; > 


(15) 


Example 1: In this example we calculate the sequences of X, and Xf t for the requirement functions 


2 4 , 4 2 o 2 2 

9 1 = P1P2 + P1P2 ~ 3 PiP 2 - P1P2 + 


92 = ~ 


2 4 

PIP 2 

2 


p\pI + 3p?p 2 + 


gjgf 

10 


P1+P2 

200 

9 

~ 10 ' 


7 

Too’ 


(16) 

(17) 


We assume that B Pl is the family of Beta distributions supported in V with parameters in 20 < a < 30 and 
20 < b < 30 while B Pi is the family of Beta distributions supported in V with parameters in0.5<c<0.7 
and 0.5 < d < 1. In this setting 0 = [a,b,c, d] T where 0 = [20,30] x [20,30] x [0.5, 0.7] x [0.5, 1]. In this 
case F p and F p arc not Beta distributions. The top of Figure 2 shows the bounding intervals X t and Xf% as 
a function of the total number of boxes in the elements of Q l . The endpoints of X j are shown as solid lines 
while ai and Pi are shown as dashed lines. While the upper endpoint of X is bounded by the red lines with 
squares, the lower endpoint is bounded by the blue lines with circles. Note that the inner bounding interval Xf t 
is non-empty only after the dashed lines cross, i.e., at the points where P t > cq. Further notice that partitions 
with more than 4000 boxes yield very tight bounding intervals. The plot in the middle shows the convergence 
of the parameters corresponding to the worst-case distribution O f while the plot at the bottom shows that for the 
best-case distribution 0 1 ’. Note that partitions comprised of more than 1000 boxes render the very same extreme- 
case distributions. This suggests the possibility of stopping the search for the extreme-case distributions before 
stopping the expansion of the bounding sets. Figure 3 shows the p-box envelopes for each of the two uncertain 
parameters as well as the extreme-ease distributions. 






Number of boxes 


Figure 2: Convergence of the bounding intervals of X, and of design variables. 


3.2.2. Arbitrary Distribution P-Boxes 

The developments of this section enable calculating the bounding intervals X ^ and X, of X corresponding to 
an arbitrary distribution p-box B p for the partition Q l . Recall that a arbitrary distribution p-box contains all 
possible distributions between the envelopes F p and F p . Let Q 1 '- 1 be the ordered list of distinct components 
resulting from projecting the vertices of all hyper-rectangles comprising Q l onto the pj axis. While j can take 
on any integer number between 1 and s, the number of elements of the list for a fixed value of j, denoted as 




Figure 3: P-box envelopes, worst- and best-case distributions for a fixed distribution p-box. 


rrij, varies. We will consider these numbers as coordinates on the p :j axis. In order to determine, for example, 
the left endpoint of Xi, it suffices to find a distribution F p £ B p for which Pp p [J-J ub ] is minimal. 

The formulation below searches for the points 


i,j A 

Vk = 


F n 


•Ay)(Q 


k > 


(18) 


of the extreme-case distributions leading to and X t . Figure 1 displays circles at the pairs ( Q k ,Vk ) pairs 
corresponding to the best-case (blue line) and worst-case (orange line) distributions. 

The scarcli for the values y 1 ' 3 taken by the extreme distributions is formulated as a non-linear optimization 
problem subject to the constraint set 


y = {y- Vk < Vk+v k = l,... nij - 1, 1 < j < s; 

F p .(Q l k ) < Vk < F Pj (Q )?), k = l,...m j , l<j<s}. 

These constraints insure that the extreme-case distribution passing through these values is non-decreasing and 
falls within the envelopes of the p-box B p . 

The left endpoint of Xi is given by 


Ii = m j n ) E Pf pw ( i9 ) 

{KeQ i ,ncTf ib J 

where F p ( y! is any distribution compliant with Equation (18). The value of y at which the minima occurs 
prescribes a finite collection of points taken by the best-case distribution function corresponding to Jq suh . In a 
si mi lar fashion, the right endpoint of Xi is given by 


Ui = mm • 
y 


E PF^W'-yzy)- 


KeQ i ,'R.CSf h 

The entries to the inner bounding interval J, : in Equation (12) arc given by 


( 20 ) 


CTj = max ■ 

y 




PF p(y) m-.yey\, 


i 7eeQ i ,7ec5f b 


( 21 ) 


Pi = max { ) 

y ^ 

n&Q\n<zTf b 


P F p( y ) [R] : y € y 


( 22 ) 


The above expressions arc analogous to those in Equations (9-14). 


Some of the design variables in y may not be necessary. This can be observed in Figure 1, where the values 
taken by the extreme-case CDFs at points other than those marked with circles do not affect the calculation 
of probabilities, and hence, the resulting bounding intervals. A more efficient implementation of Equations 
(19-22) is obtained by only choosing the components of y corresponding to the Q 1 ' 3 values associated with the 

sub respectively. 


hyper-rectangles comprising Jq, 5). 5| ub and F\ 


Note that there is an infinite number of distributions passing through the points (Q]! 3 ,y]f). Therefore, there 
will be an infinite number of distributions attaining the same bounding intervals. When the uncertain parameters 
arc independent, these probabilities arc given by 

PF P ,y) m = n Pp p {y) [Sj] = n U J - y[ J ) , 


3 = 1 


3 = 1 


(23) 






Figure 4: Convergence of the bounding intervals of X, and extreme-case distributions. 

where Sj = Q ' k , Q\’ 3 ] for l > k is the projection of 72 onto the pj axis while y k and y'j 3 are the corresponding 
values of the distribution. A few remarks on the methods that can be used to solve the optimization problems 
above are presented next. Equations (19-22) have a multi-linear cost function of order s and linear inequal- 
ity constraints. In principle, the global solution to these problems can be rigorously bounded using Bernstein 
expansions. Unfortunately, the computational cost of applying this method to problems of moderate size is 
exceedingly high. Instead, a nonlinear programming solver was used to search for the extreme distributions. 
Such a technique however, may fail to converge to the global optima. The best known method to find rigor- 
ous, or at least e-approximate solutions to this class of optimization problems, is the spatial Branch-and-Bound 
algorithm [6], This approach determines lower bounds to the cost function on each region being explored by 
solving convex relaxations of the cost function. Even though convex envelopes are explicitly known for low- 
order terms, such a description is unknown for general multi-linear terms of higher order. Note however that 
relaxation techniques will introduce irreducible conservatism into the bounding intervals. 


Example 2: Here we consider the problem in Example 2 but use arbitrary distribution p-boxes with the same 
envelopes. The top of Figure 4 shows X_ t and X, as a function of the number of boxes in the elements of the 
partition Q l . As before, the inner bounding set is empty for coarse partitions. As expected, the probability 
range for the fixed-form distribution p-boxes in Figure 2 is smaller than that for the arbitrary distribution p- 
boxes in Figure 4. The bottom plots show the convergence of the extreme-case distribution functions for p 1 
and p 2 . While the best-case distribution is shown as a black line, the worst-case is shown as a red line. As in 
the previous example, the shape of the extreme-case distributions settle for a sufficiently fine partition of the 
master domain. Figure 5 shows the envelopes of the p-box as well as the extreme-case distributions at the last 
iteration step. The coordinates of the centroid of the safe domain are near the lines p x = 0 and p 2 = 0. Is at 
these values where the best-case distribution rises the most, i.e., a large probability is placed at the core of the 
safe domain, and the worst-case rises the least, i.e., a small probability is placed at the core of the safe domain. 
This phenomenon justifies the perpendicular intersection of the extreme-case distributions of p\ at p 1 = 0. 


4. CONCLUSIONS 


This paper presents a reliability analysis framework applicable to systems subject to polynomial requirement 
functions and probability-box uncertainties. This dependency may occur naturally or artificially. Techniques 


1 




Figure 5: P-box envelopes, worst- and best-case distributions for a arbitrary distribution p-box. 


for bounding the range of failure probabilities based on interval propagation and optimization are proposed. 
The foundation of these techniques is the Bernstein expansion of polynomials. This article presents the math- 
ematical framework of these approaches and illustrates their application to an easily reproducible example 
problem. Since a single analysis, with a carefully chosen p-box, encompasses infinitely many analyses each 
having its own distributions for all uncertain parameters, this technique substantially mitigates the need for 
accurate probabilistic models of the uncertainty. When the analysis yields an inadmissibility large range of 
failure probabilities, the analyst can either refine the p-box, say by doing more experiments or simulations, or 
can redesign the system to accommodate for the existing level of knowledge. 
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